Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25d38479-752d-418e-a4fb-397c5aa432f8.roa
File: 25d38479-752d-418e-a4fb-397c5aa432f8.roa (raw, json)
Hash identifier: LUYGwZsGda0vpOR3T9k+bF7y/JrdKo2DPYzjjc7PCm0=
Subject key identifier: 13:32:CA:70:7E:DE:30:3F:AA:5F:A0:C2:5D:5C:76:C5:92:83:73:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 403035807A8D2824D04017C6586D8A2E99FFF32C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25d38479-752d-418e-a4fb-397c5aa432f8.roa
Signing time: Fri 23 Oct 2026 01:50:06 +0000
ROA not before: Fri 23 Oct 2026 01:50:06 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:30:35:80:7a:8d:28:24:d0:40:17:c6:58:6d:8a:2e:99:ff:f3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 23 01:50:06 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=345cc5ba83ab197d59a7b85d154941b382a153eb39b5861c89d58c6bf59361ae, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:ad:40:8a:98:44:d9:9f:f9:43:9b:0c:81:
90:8e:52:0c:55:7a:ee:59:d7:6a:fc:f7:77:4c:cb:
52:7a:9d:1d:fd:d8:4c:9c:4b:ce:43:5f:20:20:fa:
dc:32:f3:7f:4e:00:e8:cf:3f:5f:2f:aa:f5:94:ca:
be:50:88:48:27:46:0f:06:b6:3a:1c:21:fc:d1:06:
0a:80:dd:9e:ea:7f:ca:35:73:52:a4:91:0e:aa:06:
7a:d7:47:6d:ac:ac:ff:64:c3:80:0f:28:56:82:45:
b4:09:e0:75:c8:d7:98:4f:6a:76:6a:e8:f2:06:96:
f4:42:ee:01:d8:ba:e1:39:d4:54:83:0c:a7:9d:d8:
a8:cb:d7:98:d4:c3:c2:15:38:7d:dd:86:f3:81:eb:
a1:c3:f0:f4:92:91:e5:50:b2:52:33:53:a3:95:b7:
ef:35:d0:bb:06:24:20:94:cf:cf:be:ee:07:a5:38:
d8:43:f1:59:51:2b:f4:9d:d7:35:5f:98:cf:55:af:
41:2d:6b:ea:53:eb:85:90:93:47:5b:7f:59:b8:10:
a1:a0:db:5f:68:cb:75:56:99:ce:d7:14:31:63:71:
73:08:ba:b2:4e:87:59:dc:ea:9f:64:b4:05:10:95:
d7:9b:8a:12:fb:6c:fc:33:e3:d3:83:e2:fb:63:a4:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:32:CA:70:7E:DE:30:3F:AA:5F:A0:C2:5D:5C:76:C5:92:83:73:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25d38479-752d-418e-a4fb-397c5aa432f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:800::/40
Signature Algorithm: sha256WithRSAEncryption
3f:a7:5c:0c:7e:af:29:d9:5b:c1:90:d4:23:5a:b4:27:91:84:
54:6c:f4:24:25:52:41:ea:99:0a:75:92:7f:22:a6:a5:0b:f4:
1f:3a:21:79:d2:e0:e7:a3:db:4b:e6:7f:3f:e0:79:8f:a3:0d:
f5:51:d2:a9:40:7e:a1:a0:a7:3f:b9:34:1b:03:51:e6:55:fc:
c6:b3:c1:de:3d:fb:97:d1:4e:3f:a8:be:8b:46:2c:70:5a:ad:
9c:36:ac:32:21:52:ec:47:4a:f1:76:71:a5:7f:56:7f:51:31:
2c:38:1d:0f:ec:2b:ab:83:ac:03:32:58:99:b0:50:80:e8:8f:
61:80:fe:bf:35:09:d0:09:a3:f4:d2:6a:40:e4:bf:4a:3c:68:
fc:07:76:83:98:7f:23:d6:20:87:b7:7a:97:8f:4f:48:56:65:
2f:e6:d9:c2:77:4b:eb:5a:11:47:45:f0:cc:c3:97:9e:f2:c8:
40:9e:0f:78:71:4e:88:6f:6f:bc:87:ef:dc:eb:5d:a6:7d:cb:
ca:45:ae:09:2d:f1:9c:81:f6:b1:ea:f0:72:6b:b3:ea:3b:b4:
53:ea:02:a7:d3:3b:ac:de:24:3b:66:9d:d4:23:f4:01:e9:43:
5f:de:d1:bc:92:18:be:1d:38:6a:98:45:c2:c1:3b:8d:e8:7d:
d1:23:f5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:53:24 2026 by rpki-client